+ Post New Thread
Results 1 to 10 of 10
Windows Thread, Blocking certain file extensions in Technical; Hi I am after a way of blocking certain file extensions from running from the users h: drive (redirected my ...
  1. #1
    bart21's Avatar
    Join Date
    Aug 2009
    Location
    peterborough
    Posts
    404
    Thank Post
    77
    Thanked 54 Times in 52 Posts
    Rep Power
    20

    Blocking certain file extensions

    Hi

    I am after a way of blocking certain file extensions from running from the users h: drive (redirected my documents).

    inperticular .mht files!

    is there a way to do this via Group Policy?

    thanks

  2. #2
    bart21's Avatar
    Join Date
    Aug 2009
    Location
    peterborough
    Posts
    404
    Thank Post
    77
    Thanked 54 Times in 52 Posts
    Rep Power
    20
    wont that block the whole of the h drive?

  3. #3

    DaveP's Avatar
    Join Date
    Oct 2006
    Location
    Can't talk now: The mother-ship is calling!
    Posts
    8,898
    Thank Post
    351
    Thanked 1,290 Times in 882 Posts
    Blog Entries
    4
    Rep Power
    1128
    I have just tried what has been suggested above and I can't get it to work [students can still run Sol.EXE in their home folder [U:]

    I would love to crack this: Been trying to get it right for ages!

  4. #4

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,665
    Thank Post
    850
    Thanked 893 Times in 738 Posts
    Blog Entries
    9
    Rep Power
    328
    If I remember rightly you need to add additional rules for the file types you want to block, such as

    H:\*.exe

    Either that or create a hash for Sol.exe and then create a hash rule to block that particular program.

  5. #5

    DaveP's Avatar
    Join Date
    Oct 2006
    Location
    Can't talk now: The mother-ship is calling!
    Posts
    8,898
    Thank Post
    351
    Thanked 1,290 Times in 882 Posts
    Blog Entries
    4
    Rep Power
    1128
    I have just tried the additional rule route [U:\*.exe]

    That did not work.

    I am now trying the hash route [waiting for the policy to replicate before restating the station and logging a test student on again...]

    Edit: Success! Thanks. Now all I have to do is block all of the programs that I don't want them to run from U:, E:, and F:

    Edit: And I need to find how to prevent ALL EXEs from running from U:, E:, and F:
    Last edited by DaveP; 13th October 2010 at 02:57 PM. Reason: Add detail to the post. Resolved?

  6. #6
    detjo's Avatar
    Join Date
    Feb 2008
    Posts
    356
    Thank Post
    13
    Thanked 47 Times in 39 Posts
    Rep Power
    31
    And I need to find how to prevent ALL EXEs from running from U:, E:, and F:
    Does FSRM offer anything?

  7. #7
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,203
    Thank Post
    212
    Thanked 222 Times in 191 Posts
    Rep Power
    72
    If your server is running Windows 2008 you can add on the File Server resource manager and then use the File Screening Management section to prevent users saving particular file types to the drives such as .exe .com .cmd etc. Once they can't save that kind of file to their area all you need to do is a find and delete procedure to remove the current ones.

  8. #8
    IanT's Avatar
    Join Date
    Aug 2008
    Location
    @ the back of my server racks farting.....
    Posts
    1,891
    Thank Post
    2
    Thanked 118 Times in 109 Posts
    Rep Power
    60
    Im surprised no one has suggested File Server Resource Manager, I use this and works a treat!

  9. #9


    Join Date
    Oct 2006
    Posts
    3,411
    Thank Post
    184
    Thanked 356 Times in 285 Posts
    Rep Power
    149
    2003 R2 has file screening too

  10. #10

    DaveP's Avatar
    Join Date
    Oct 2006
    Location
    Can't talk now: The mother-ship is calling!
    Posts
    8,898
    Thank Post
    351
    Thanked 1,290 Times in 882 Posts
    Blog Entries
    4
    Rep Power
    1128
    Quote Originally Posted by detjo View Post
    Does FSRM offer anything?
    I have just had a look at the server and FSRM was already installed [I hadn't noticed it]

    I have just configured the 'Block Executables' for students and I have also told the sever to send me a report on executables and duplicate files. Thinking about it now perhaps the duplicate files report was not such a good idea but it is done now so I will wait and see what comes through.

    Edit: I have got FSRM working. I also have E-Mail alerts when a student tries to save an executable to their MyWork on the network.

    Now all I have to do is put similar blocks in place for USB memory sticks. Back to Group Policy/Hash Rules?
    Last edited by DaveP; 14th October 2010 at 11:23 AM. Reason: Add detail to the post.

SHARE:
+ Post New Thread

Similar Threads

  1. VBScript, wildcards or file extensions
    By Bobo in forum Windows
    Replies: 4
    Last Post: 25th August 2011, 04:58 PM
  2. Preventing File Extensions through GPO
    By flexyjerkov in forum Windows Server 2000/2003
    Replies: 22
    Last Post: 29th November 2010, 01:24 AM
  3. File blocking based on a hash value
    By phodge in forum Windows
    Replies: 1
    Last Post: 30th March 2010, 03:11 PM
  4. File Extensions
    By Gatt in forum Windows
    Replies: 5
    Last Post: 31st January 2007, 01:29 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •